WEBVTT

1
00:00:00.000 --> 00:00:02.764
Practical: Adversarial Examination.

2
00:00:02.764 --> 00:00:08.942
Read a measured ten-check run and treat a pass as practice, not a credential.

3
00:00:08.942 --> 00:00:14.435
The practical runs ten attacks against a fresh teaching workstation.

4
00:00:14.435 --> 00:00:16.402
Approval cannot dispatch.

5
00:00:16.402 --> 00:00:18.943
A consumed permit cannot replay.

6
00:00:18.943 --> 00:00:21.730
A substituted resource is rejected.

7
00:00:21.730 --> 00:00:24.517
Restart does not restore authority.

8
00:00:24.517 --> 00:00:26.976
A revoked actor cannot execute.

9
00:00:26.976 --> 00:00:29.271
Malformed input fails closed.

10
00:00:29.271 --> 00:00:31.157
A bypass cannot execute.

11
00:00:31.157 --> 00:00:32.960
DENY does not dispatch.

12
00:00:32.960 --> 00:00:35.747
Evidence stays bound to the action.

13
00:00:35.747 --> 00:00:39.518
An adapter token and a message are not permits.

14
00:00:39.518 --> 00:00:41.813
This run passed those checks.

15
00:00:41.813 --> 00:00:47.961
The practical is not proctored, and it does not grant operational authority.

16
00:00:47.961 --> 00:00:50.218
The first measured checks.

17
00:00:50.218 --> 00:00:55.456
approval is a fact; PERMIT_WITH_APPROVAL does not dispatch.

18
00:00:55.456 --> 00:00:56.901
The check passed.

19
00:00:56.901 --> 00:00:59.881
a consumed permit does not replay.

20
00:00:59.881 --> 00:01:01.325
The check passed.

21
00:01:01.325 --> 00:01:07.195
authority stays bound to the actor, request, effect, and resource.

22
00:01:07.195 --> 00:01:08.640
The check passed.

23
00:01:08.640 --> 00:01:13.877
restart keeps consumption and revocation and mints nothing.

24
00:01:13.877 --> 00:01:15.322
The check passed.

25
00:01:15.322 --> 00:01:16.677
revocation wins.

26
00:01:16.677 --> 00:01:18.121
The check passed.

27
00:01:18.121 --> 00:01:20.479
The remaining measured checks.

28
00:01:20.479 --> 00:01:26.331
This practical is not proctored and does not grant operational authority.

29
00:01:26.331 --> 00:01:30.314
malformed, blank, and unknown effects fail closed.

30
00:01:30.314 --> 00:01:31.615
The check passed.

31
00:01:31.615 --> 00:01:36.573
Rain does not run around CRUSHIA, and handle does not execute.

32
00:01:36.573 --> 00:01:37.874
The check passed.

33
00:01:37.874 --> 00:01:41.451
DENY means dispatch false and executed false.

34
00:01:41.451 --> 00:01:42.751
The check passed.

35
00:01:42.751 --> 00:01:47.384
evidence verifies only while it stays bound to the action.

36
00:01:47.384 --> 00:01:48.685
The check passed.

37
00:01:48.685 --> 00:01:54.212
another agent, an IPC message, and an adapter token are not a PERMIT.

38
00:01:54.212 --> 00:01:55.513
The check passed.